官方網址:http://bk.tencent.com/
目前社區單機版最低配置:4核心 12G 內存 50G 硬盤
[root@bogon ~]# df -h Filesystem Size Used Avail Use% Mounted on /dev/mapper/centos-root 88G 5.2G 83G 6% / devtmpfs 5.9G 0 5.9G 0% /dev tmpfs 5.9G 0 5.9G 0% /dev/shm tmpfs 5.9G 13M 5.9G 1% /run tmpfs 5.9G 0 5.9G 0% /sys/fs/cgroup /dev/sda1 473M 150M 323M 32% /boot tmpfs 1.2G 4.0K 1.2G 1% /run/user/42 tmpfs 1.2G 60K 1.2G 1% /run/user/0 /dev/sr0 4.2G 4.2G 0 100% /run/media/root/CentOS 7 x86_64 [root@bogon ~]# free -m total used free shared buff/cache available Mem: 11998 941 10164 15 892 10719 Swap: 12287 0 12287 [root@bogon ~]# cat /proc/cpuinfo| grep "processor"| wc -l 4
我這是個人筆記本安裝
但是I7-6700HQ這款CPU其實是單核4核心外加4線程
所以wmware里最大只能選擇如下
Centos7 安裝就不啰嗦了,sercuriy policy 可以不用設置 kdump也可以關了
Centos7關閉防火牆、開機禁用防火牆
[root@bogon ~]# systemctl stop firewalld.service [root@bogon ~]# systemctl disable firewalld.service Removed symlink /etc/systemd/system/multi-user.target.wants/firewalld.service. Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.
Centos7關閉NetworkManager服務,並設置開機禁用
[root@bogon ~]# service NetworkManager stop Redirecting to /bin/systemctl stop NetworkManager.service [root@bogon ~]# systemctl disable NetworkManager.service Removed symlink /etc/systemd/system/multi-user.target.wants/NetworkManager.service. Removed symlink /etc/systemd/system/dbus-org.freedesktop.NetworkManager.service. Removed symlink /etc/systemd/system/dbus-org.freedesktop.nm-dispatcher.service.
關閉SELinux 修改配置文件(需要重啟)
vi /etc/selinux/config SELINUX=enforcing 改為SELINUX=disabled
[root@bogon ~]# getenforce
Enforcing
修改系統ulimit值
修改之前需要重啟下ssd服務
[root@bogon etc]# systemctl restart sshd.service
[root@bogon ~]# ulimit -n 1024 [root@bogon ~]# echo ulimit -n 204800 >> /etc/profile [root@bogon etc]# source /etc/profile [root@bogon etc]# ulimit -n 204800
為其他用戶修改當前交互終端的limit值
[root@bogon etc]# vi /etc/security/limits.conf
# End of file
soft nofile 204800
hard nofile 204800
hive - nofile 1024000
hive - nproc 1024000
經過以上修改,在有些系統中,用一般用戶再登陸,仍然沒有修改過來,那么需要檢查是否有如下文件,如果沒有,則要添加如下內容:
[root@bogon etc]# vi /etc/pam.d/sshd
session required /lib/security/pam_limits.so
[root@bogon etc]# systemctl restart sshd.service
仍然不行,那么需要修改如下文件:
vim /etc/ssh/sshd_config UsePrivilegeSeparation no
檢查系統的umask值
[root@bogon etc]# umask 0022 root用戶 0022 一般用戶 0002
umask修改只是臨時,可以通過修改/etc/profile 或者 /etc/bashrc 添加 umask xxx 來修改
兩個文件不同之處在於/etc/profile只對新創建的用戶生效,而/etc/bashrc對所有用戶都生效
安裝並檢查rsync
對於負荷較重的 rsync 服務器應該使用獨立運行方式
[root@bogon ~]# yum install rsync xinetd
[root@bogon ~]# /usr/bin/rsync --daemon
對於負荷較輕的rsync服務器可以使用xinetd運行方式
[root@bogon xinetd.d]# yum install rsync xinetd [root@bogon xinetd.d]#/etc/init.d/xinetd start [root@bogon xinetd.d]#netstat -ntpl | grep 873 --查看服務是否啟動
客戶端(部署單機版不需要客戶端)
[root@bogon xinetd.d]#yum -y install rsync
配置DNS用於解析公網YUM源
[root@bogon xinetd.d]# vi /etc/resolv.conf # Generated by NetworkManager nameserver 202.102.224.68 nameserver 202.102.227.68 nameserver 8.8.8.8/114.114.114.114
配置公網yum源頭
[root@bogon xinetd.d]# wget /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo wget /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo [root@bogon xinetd.d]# yum clean all [root@bogon xinetd.d]# yum repolist [root@bogon xinetd.d]# yum makecache
騰訊雲EPEL
EPEL (Extra Packages for Enterprise Linux) 是由 Fedora Special Interest Group 為企業 Linux 創建、維護和管理的一個高質量附加包集合適用於
但不僅限於 Red Hat Enterprise Linux (RHEL), CentOS, Scientific Linux (SL), Oracle Linux (OL)
# epel(RHEL5系列) wget -O /etc/yum.repos.d/epel.repo http://mirrors.cloud.tencent.com/repo/epel-5.repo
# epel(RHEL6系列) wget -O /etc/yum.repos.d/epel.repo http://mirrors.cloud.tencent.com/repo/epel-6.repo
# epel(RHEL7系列) wget -O /etc/yum.repos.d/epel.repo http://mirrors.cloud.tencent.com/repo/epel-7.repo
上傳藍鯨包並解壓
[root@bogon data]# ls -l total 1397608 -rw-r--r--. 1 root root 599243450 Dec 12 18:39 bkce_common-1.0.0.tgz -rw-r--r--. 1 root root 811181199 Dec 12 18:38 bkce_product-4.1.16.tgz drwxr-xr-x. 13 root root 4096 Oct 12 16:50 install -rw-r--r--. 1 root root 20714827 Dec 12 18:40 install_ce-master-1.4.13.tgz drwxr-xr-x. 14 root root 242 Oct 15 19:10 src
獲取本機mac地址
獲取機器的MAC地址后,下載證書文件: http://bk.tencent.com/download/#ssl, 解壓到 src/cert 目錄下
[root@bogon data]# tar xf ssl_certificates.tar.gz -C /data/src/cert
修改管理員密碼
[root@bogon data]# vim /data/install/globals.env export PAAS_ADMIN_PASS='password'
啟動安裝腳本前的檢查
[root@localhost install]# ./precheck.sh <<check_ssh_nopass>> has been checked successfully... SKIP <<check_password>> has been checked successfully... SKIP <<check_cert_mac>> has been checked successfully... SKIP <<check_selinux>> has been checked successfully... SKIP <<check_umask>> has been checked successfully... SKIP <<check_get_lan_ip>> has been checked successfully... SKIP <<check_rabbitmq_version>> has been checked successfully... SKIP <<check_http_proxy>> has been checked successfully... SKIP start <<check_open_files_limit>> ... [OK] start <<check_domain>> ... [OK] start <<check_rsync>> ... [OK] start <<check_networkmanager>> ... [OK] start <<check_firewalld>> ... [OK]
安裝開始
root@localhost install]# ./install_minibk [192.168.30.109]20181217-140612 37 install.config exists. backup it to install.config.20181217_140612 ‘install.config’ -> ‘install.config.20181217_140612’ <<check_ssh_nopass>> has been checked successfully... SKIP <<check_password>> has been checked successfully... SKIP <<check_cert_mac>> has been checked successfully... SKIP <<check_selinux>> has been checked successfully... SKIP <<check_umask>> has been checked successfully... SKIP <<check_get_lan_ip>> has been checked successfully... SKIP <<check_rabbitmq_version>> has been checked successfully... SKIP <<check_http_proxy>> has been checked successfully... SKIP <<check_open_files_limit>> has been checked successfully... SKIP <<check_domain>> has been checked successfully... SKIP <<check_rsync>> has been checked successfully... SKIP <<check_networkmanager>> has been checked successfully... SKIP <<check_firewalld>> has been checked successfully... SKIP where do you want to install blueking products. enter a absolute path [/data/bkce]: [192.168.30.109]20181217-140616 212 >> rsync -a /data/src/service/py27 /opt/ Loaded plugins: fastestmirror, langpacks Repository os is listed more than once in the configuration Repository updates is listed more than once in the configuration Repository centosplus is listed more than once in the configuration Repository cloud is listed more than once in the configuration Repository cr is listed more than once in the configuration Repository extras is listed more than once in the configuration Repository fasttrack is listed more than once in the configuration Repository cr is listed more than once in the configuration Repository fasttrack is listed more than once in the configuration Loading mirror speeds from cached hostfile Package autoconf-2.69-11.el7.noarch already installed and latest version Resolving Dependencies --> Running transaction check ---> Package gcc.x86_64 0:4.8.5-28.el7 will be updated --> Processing Dependency: gcc = 4.8.5-28.el7 for package: libitm-devel-4.8.5-28.el7.x86_64 ---> Package gcc.x86_64 0:4.8.5-36.el7 will be an update --> Processing Dependency: libgomp = 4.8.5-36.el7 for package: gcc-4.8.5-36.el7.x86_64 --> Processing Dependency: cpp = 4.8.5-36.el7 for package: gcc-4.8.5-36.el7.x86_64 --> Processing Dependency: libgcc >= 4.8.5-36.el7 for package: gcc-4.8.5-36.el7.x86_64 --> Running transaction check 。。。 。。。 。。。
提示
------------------------- agreements --------------------------------- Dear users, welcome to use the Tencent BlueKing Software. Please access http://bk.tencent.com/info/#laws to read the Tencent BlueKing Software License and Service Agreement carefully. You have no right to install or use the Software and related services unless you have read and accepted all the terms of this Agreement. By downloading, install- ing, using or logging in the Software, you shall be deemed to have read and agreed to be bound by the Agreement above. If you have under- stood the above content, please enter "yes" to continue installation, otherwise, please enter "no" to abort. Thank you for your understan- ding and support of the Tencent BlueKing Software. ---------------------------------------------------------------------- yes/no ? yes
。。。
。。。
。。。
。。。
。。。
。。。